-
Notifications
You must be signed in to change notification settings - Fork 1
fix(deps): update all non-major dependencies #3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/all-minor-patch
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+11
−11
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
8df1e2b
to
a4aed74
Compare
b2534da
to
0374365
Compare
0374365
to
d93131a
Compare
d93131a
to
03446e5
Compare
8622a05
to
d906770
Compare
334ffdf
to
59b1346
Compare
791bf55
to
88ad81f
Compare
66c68e5
to
55b0982
Compare
|
822ca28
to
10eed02
Compare
fd5d30c
to
67e3529
Compare
4489acd
to
12398ea
Compare
12398ea
to
db7fbe2
Compare
4ae5115
to
12fad8f
Compare
bf5c79f
to
5eaf4e7
Compare
e88096c
to
a557c7d
Compare
fad505f
to
35718a7
Compare
936389c
to
73a17fe
Compare
bc07f8e
to
1fafd0a
Compare
c62069b
to
20e447c
Compare
20e447c
to
fdc427e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.0.1
->^4.0.3
^1.10.0
->^1.11.1
^0.20.0
->^0.23.2
^18.15.5
->^18.19.111
^7.3.13
->^7.7.0
^7.1.1
->^7.2.0
^3.3.1
->^3.3.2
10.0.0
->10.12.1
^7.3.8
->^7.7.2
^2.8.1
->^2.13.0
^4.19.2
->^4.20.1
Release Notes
actions/toolkit (@actions/cache)
v4.0.3
v4.0.2
antfu-collective/ni (@antfu/ni)
v0.23.2
Compare Source
No significant changes
View changes on GitHub
v0.23.1
Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
v0.23.0
Compare Source
🚨 Breaking Changes
parseNi
etc. now returnResolvedCommand
object instead of string, migrate totinyexec
- by @userquin, Ben McCann and @antfu in https://github.com/antfu-collective/ni/issues/231 (3d323)View changes on GitHub
v0.22.4
Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.22.3
Compare Source
🐞 Bug Fixes
@jsdevtools/ez-spawn
, fix #224 - by @antfu in https://github.com/antfu-collective/ni/issues/224 (af1b1)View changes on GitHub
v0.22.2
Compare Source
No significant changes
View changes on GitHub
v0.22.1
Compare Source
🚀 Features
🐞 Bug Fixes
bun x
instead ofbunx
- by @MAttila42 in https://github.com/antfu-collective/ni/issues/219 (13282)View changes on GitHub
v0.22.0
Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
v0.21.12
Compare Source
🐞 Bug Fixes
yarn@>1
andpnpm@<7
- by @auvred in https://github.com/antfu/ni/issues/190 (2fbce)View changes on GitHub
v0.21.11
Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.21.10
Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.21.9
Compare Source
🚀 Features
🐞 Bug Fixes
-v
flag not working foryarn@berry
- by @Dimava in https://github.com/antfu/ni/issues/175 (9e3c9)View changes on GitHub
v0.21.8
Compare Source
🚀 Features
args
- by @antfu (7a165)View changes on GitHub
v0.21.7
Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
v0.21.6
Compare Source
🚀 Features
nu
support for bun - by @jatindotdev in https://github.com/antfu/ni/issues/167 (63b6a)View changes on GitHub
v0.21.5
Compare Source
🚀 Features
getCliCommand
function - by @ghengeveld and @antfu in https://github.com/antfu/ni/issues/164 (17d8e)🐞 Bug Fixes
View changes on GitHub
v0.21.4
Compare Source
🚀 Features
View changes on GitHub
v0.21.3
Compare Source
No significant changes
View changes on GitHub
v0.21.2
Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.21.1
Compare Source
v0.21.0
Compare Source
🚨 Breaking Changes
nix
tonlx
- by @antfu (ee46d)🚀 Features
🐞 Bug Fixes
🏎 Performance
View changes on GitHub
pnpm/pnpm (pnpm)
v10.12.1
Minor Changes
Experimental. Added support for global virtual stores. When enabled,
node_modules
contains only symlinks to a central virtual store, rather tonode_modules/.pnpm
. By default, this central store is located at<store-path>/links
(you can find the store path by runningpnpm store path
).In the central virtual store, each package is hard linked into a directory whose name is the hash of its dependency graph. This allows multiple projects on the system to symlink shared dependencies from this central location, significantly improving installation speed when a warm cache is available.
To enable the global virtual store, set
enableGlobalVirtualStore: true
in your rootpnpm-workspace.yaml
, or globally via:NOTE: In CI environments, where caches are typically cold, this setting may slow down installation. pnpm automatically disables the global virtual store when running in CI.
Related PR: #8190
pnpm update
command now supports updatingcatalog:
protocol dependencies and writes new specifiers topnpm-workspace.yaml
.--save-catalog
and--save-catalog-name=<name>
) topnpm add
to save new dependencies as catalog entries.catalog:
orcatalog:<name>
will be added topackage.json
and the package specifier will be added to thecatalogs
orcatalog[<name>]
object inpnpm-workspace.yaml
#9425.ci
for explicitly telling pnpm if the current environment is a CI or not.Patch Changes
pnpm patch
using semantic versioning rules.v10.11.1
Compare Source
Patch Changes
pnpm deploy --legacy
creates unexpected directories when the rootpackage.json
has a workspace package as a peer dependency #9550.strictPeerDependencies
istrue
but all issues are ignored bypeerDependencyRules
#9505.pnpm_config_
env variables instead ofnpm_config_
#9571.--lockfile-only
flag onpnpm update
to produce a differentpnpm-lock.yaml
than an update without the flag.pnpm deploy
work in repos withoverrides
wheninject-workspace-packages=true
#9283.pnpm -r --silent run
should not print out section #9563.v10.11.0
Compare Source
Minor Changes
A new setting added for
pnpm init
to create apackage.json
withtype=module
, wheninit-type
ismodule
. Works as a flag for the init command too #9463.Added support for Nushell to
pnpm setup
#6476.Added two new flags to the
pnpm audit
command,--ignore
and--ignore-unfixable
#8474.Ignore all vulnerabilities that have no solution:
> pnpm audit --ignore-unfixable
Provide a list of CVE's to ignore those specifically, even if they have a resolution.
> pnpm audit --ignore=CVE-2021-1234 --ignore=CVE-2021-5678
Added support for recursively running pack in every project of a workspace #4351.
Now you can run
pnpm -r pack
to pack all packages in the workspace.Patch Changes
dangerouslyAllowAllBuilds
is set totrue
#9472.pnpm link
should work from inside a workspace #9506.workspaceConcurrency
toMath.min(os.availableParallelism(), 4)
#9493.strictPeerDependencies
istrue
but all issues are ignored bypeerDependencyRules
#9505.updateConfig
frompnpm-workspace.yaml
#9500.recursive pack
url.parse
usage to fix warning on Node.js 24 #9492.pnpm run
should be able to run commands from the workspace root, ifignoreScripts
is set tottrue
#4858.v10.10.0
Compare Source
Minor Changes
preResolution
,importPackage
, andfetchers
hooks from local pnpmfile.Patch Changes
cd
command, whenshellEmulator
istrue
#7838.pnpm-workspace.yaml
#9453.npm_package_json
environment variable to the executed scripts #9452.--reporter=silent
option.v10.9.0
Compare Source
Minor Changes
Added support for installing JSR packages. You can now install JSR packages using the following syntax:
or with a version range:
For example, running:
will add the following entry to your
package.json
:When publishing, this entry will be transformed into a format compatible with npm, older versions of Yarn, and previous pnpm versions:
Related issue: #8941.
Note: The
@jsr
scope defaults to https://npm.jsr.io/ if the@jsr:registry
setting is not defined.Added a new setting,
dangerouslyAllowAllBuilds
, for automatically running any scripts of dependencies without the need to approve any builds. It was already possible to allow all builds by adding this topnpm-workspace.yaml
:dangerouslyAllowAllBuilds
has the same effect but also allows to be set globally via:It can also be set when running a command:
Patch Changes
verifyDepsBeforeRun
whennodeLinker
ishoisted
and there is a workspace package without dependencies andnode_modules
directory #9424.verifyDepsBeforeRun
support fornodeLinker: pnp
. CombiningverifyDepsBeforeRun
andnodeLinker: pnp
will now print a warning.v10.8.1
Compare Source
Patch Changes
package.json
,onlyBuiltDependencies
will be written topnpm-workspace.yaml
file #9404.v10.8.0
Compare Source
Minor Changes
Experimental. A new hook is supported for updating configuration settings. The hook can be provided via
.pnpmfile.cjs
. For example:Now you can use the
pnpm add
command with the--config
flag to install new configurational dependencies #9377.Patch Changes
!/
inpnpm-workspace.yaml
. This fixes a regression introduced by #9169.pnpm audit --fix
should update the overrides inpnpm-workspace.yaml
.pnpm link
should update overrides inpnpm-workspace.yaml
, not inpackage.json
#9365.v10.7.1
: pnpm 10.7.1Compare Source
Patch Changes
pnpm config set
should convert the settings to their correct type before adding them topnpm-workspace.yaml
#9355.pnpm config get
should read auth related settings via npm CLI #9345.~/
in a path in.npmrc
with the home directory #9217.Platinum Sponsors
Gold Sponsors
v10.7.0
Compare Source
Minor Changes
pnpm config get
andlist
also show settings set inpnpm-workspace.yaml
files #9316.It should be possible to use env variables in
pnpm-workspace.yaml
setting names and value.Add an ability to patch dependencies by version ranges. Exact versions override version ranges, which in turn override name-only patches. Version range
*
is the same as name-only, except that patch application failure will not be ignored.For example:
The above configuration would apply
patches/foo-3.patch
to[email protected]
,patches/foo-2.patch
to allfoo
versions which satisfy^2.0.0
except2.1.0
, andpatches/foo-1.patch
to the remainingfoo
versions.pnpm config set --location=project
saves the setting to apnpm-workspace.yaml
file if no.npmrc
file is present in the directory #9316.Rename
pnpm.allowNonAppliedPatches
topnpm.allowUnusedPatches
. The old name is still supported but it would print a deprecation warning message.Add
pnpm.ignorePatchFailures
to manage whether pnpm would ignore patch application failures.If
ignorePatchFailures
is not set, pnpm would throw an error when patches with exact versions or version ranges fail to apply, and it would ignore failures from name-only patches.If
ignorePatchFailures
is explicitly set tofalse
, pnpm would throw an error when any type of patch fails to apply.If
ignorePatchFailures
is explicitly set totrue
, pnpm would print a warning when any type of patch fails to apply.Patch Changes
v10.6.5
Compare Source
Patch Changes
ignoredBuilds
field in the.modules.yaml
file #9240.catalog:
protocol in injected local workspace packages. This previously errored withERR_PNPM_SPEC_NOT_SUPPORTED_BY_ANY_RESOLVER
. #8715workspace-concurrency
to less than or equal to 0 should work #9297.v10.6.4
Compare Source
Patch Changes
pnpm dlx
with--allow-build
flag #9263.use-node-version
should not cause pnpm itself to break #9276.v10.6.3
Compare Source
Patch Changes
pnpm install --prod=false
should not crash, when executed in a project with apnpm-workspace.yaml
file #9233. This fixes regression introduced via #9211.Add the missing
node-options
config torecursive run
#9180.Removed a branching code path that only executed when
dedupe-peer-dependents=false
. We believe this internal refactor will not result in behavior changes, but we expect it to make future pnpm versions behave more consistently for projects that overridededupe-peer-dependents
to false. There should be less unique bugs from turning offdedupe-peer-dependents
.See details in #9259.
v10.6.2
Compare Source
Patch Changes
pnpm self-update
should always update the version in thepackageManager
field ofpackage.json
.pnpm patch-commit
will now use the same filesystem as the store directory to compare and create patch files.--loglevel=error
is used.peerDependencyRules
should be set inpnpm-workspace.yaml
to take effect.v10.6.1
Compare Source
Patch Changes
--silent
reporting is used.--loglevel
is set toerror
, don't show installation summary, execution time, and big tarball download progress.package.json
#9226.approve-builds
command, if package.json containsonlyBuiltDependencies
orignoredBuiltDependencies
, the selected dependency package will continue to be written intopackage.json
.v10.6.0
Compare Source
Minor Changes
pnpm-workspace.yaml
can now hold all the settings that.npmrc
accepts. The settings should use camelCase #9211.pnpm-workspace.yaml
example:Projects using a
file:
dependency on a local tarball file (i.e..tgz
,.tar.gz
,.tar
) will see a performance improvement during installation. Previously, using afile:
dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.Patch Changes
pnpm self-update
should not leave a directory with a broken pnpm installation if the installation fails.fast-glob
replace withtinyglobby
to reduce the size of the pnpm CLI dependencies #9169.pnpm deploy
should not remove fields from the deployed package'spackage.json
file #9215.pnpm self-update
should not read the pnpm settings from thepackage.json
file in the current working directory.pnpm deploy
creating apackage.json
without theimports
andlicense
field #9193.pnpm update -i
should list only packages that have newer versions #9206.catalogs
section of thepnpm-lock.yaml
file to be removed whendedupe-peer-dependents=false
on a filtered install. #9112v10.5.2
Compare Source
Patch Changes
pnpm config set
command should change the global.npmrc
file by default.This was a regression introduced by #9151 and shipped in pnpm v10.5.0.
v10.5.1
Compare Source
Patch Changes
pnpm-workspaces.yaml
orpnpm-workspaces.yml
file is found instead of apnpm-workspace.yaml
#9170.pnpm-workspace.yaml
by thepnpm approve-builds
command #9168.package.json
#9163overrides
inpnpm-workspace.yaml
should work.pnpm dlx
should ignore settings from thepackage.json
file in the current working directory #9178.v10.5.0
Compare Source
Minor Changes
Allow to set the "pnpm" settings from
package.json
via thepnpm-workspace.yaml
file #9121.Added support for automatically syncing files of injected workspace packages after
pnpm run
#9081. Use thesync-injected-deps-after-scripts
setting to specify which scripts build the workspace package. This tells pnpm when syncing is needed. The setting should be defined in a.npmrc
file at the root of the workspace. Example:The
packages
field inpnpm-workspace.yaml
became optional.Patch Changes
pnpm link
with no parameters should work as if--global
is specified #9151.--config.
prefix such as--@​scope:registry=https://scope.example.com/npm
#9089.pnpm link <path>
should calculate relative path from the root of the workspace directory #9132.pnpm-lock.yaml
file when using--fix-lockfile
and--filter
. #8639v10.4.1
Compare Source
Patch Changes
--allow-build
option overlaps with thepnpm.ignoredBuildDependencies
list #9105.init-package-manager
should work.v10.4.0
Compare Source
Minor Changes
pnpm approve-builds --global
works now for allowing dependencies of globally installed packages to run postinstall scripts.The
pnpm add
command now supports a new flag,--allow-build
, which allows building the specified dependencies. For instance, if you want to install a package calledbundle
that hasesbuild
as a dependency and want to allowesbuild
to run postinstall scripts, you can run:This will run
esbuild
's postinstall script and also add it to thepnpm.onlyBuiltDependencies
field ofpackage.json
. So,esbuild
will always be allowed to run its scripts in the future.Related PR: #9086.
The
pnpm init
command adds apackageManager
field with the current version of pnpm CLI #9069. To disable this behaviour, set theinit-package-manager
setting tofalse
.Patch Changes
pnpm approve-builds
should work after two consecutivepnpm install
runs #9083.packageManager
cannot start withv
.v10.3.0
Compare Source
Minor Changes
strict-dep-builds
. When enabled, the installation will exit with a non-zero exit code if any dependencies have unreviewed build scripts (aka postinstall scripts) #9071.Patch Changes
verify-deps-before-run
afterpnpm install --production|--no-optional
#9019.v10.2.1
Compare Source
Patch Changes
pnpm approve-builds
should work, when executed from a subdirectory of a workspace #9042.pnpm deploy --legacy
should work without injected dependencies.v10.2.0
Compare Source
Minor Changes
Packages executed via
pnpm dlx
andpnpm create
are allowed to be built (run postinstall scripts) by default.If the packages executed by
dlx
orcreate
have dependencies that have to be built, they should be listed via the--allow-build
flag. For instance, if you want to run a package calledbundle
that hasesbuild
in dependencies and want to allowesbuild
to run postinstall scripts, run:Related PR: #9026.
Patch Changes
pnpm deploy
fails to read the correctprojectId
when the deploy source is the same as the workspace directory #9001.overrides
from adding invalid version ranges topeerDependencies
by keeping thepeerDependencies
and overriding them with proddependencies
#8978.pnpm approve-builds
.v10.1.0
Compare Source
Minor Changes
pnpm ignored-builds
#8963.pnpm approve-builds
#8963.Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.